CVE-2024-37320

CVE-2024-37320 affects the SQL Server Native Client OLE DB Provider and enables remote code execution via the OLE DB client library. The vulnerability is network-facing with low attack complexity and requires user interaction, with high impact on confidentiality, integrity, and availability (CVSS...

CVE-2024-37321 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21425 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21425

CVE-2024-21425 is a SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability affecting the SQL Server Native Client OLE DB Provider. The issue enables arbitrary code execution via the client driver when connecting to SQL Server and is rated CVSSv3.1 8.8 (High) with network att...

CVE-2024-37319 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-37319

CVE-2024-37319 is a Microsoft SQL Server Native Client OLE DB Provider Remote Code Execution vulnerability. The advisory data confirms the flaw affects the SQL Server Native Client OLE DB Provider, with a CVSS v3.1 base score of 8.8 (High). Attack vector is NETWORK; exploitation requires user int...

CVE-2024-37319 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21425 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21331

CVE-2024-21331 corresponds to a Remote Code Execution vulnerability in the SQL Server Native Client OLE DB Provider. The CVE is publicly listed with a CVSSv3.1 base score of 8.8 (HIGH) and a network attack vector, with user interaction required, as per the CVSS data in the initial document. The v...

CVE-2024-21317

CVE-2024-21317 affects the SQL Server Native Client OLE DB Provider and is an active SQL Server Client vulnerability that enables remote code execution via the OLE DB driver. The CVE is listed among multiple SQL Server RC vulnerabilities, with a CVSSv3 base score of 8.8 (Network attack, no privil...

CVE-2024-21308 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21308

CVE-2024-21308 affects the SQL Server Native Client OLE DB Provider. The vulnerability enables remote code execution when a vulnerable client communicates with a server presenting malicious data (attack vector: NETWORK; user interaction required). Microsoft released fixes in the July 9, 2024 secu...

CVE-2024-20701 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-21303 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-20701 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35272

CVE-2024-35272 is a SQL Server Native Client OLE DB Provider remote code execution vulnerability. The NCSC advisory and Microsoft KB update confirm the issue affects Windows SQL Server components and was fixed by July 9, 2024 security updates (KB5040944). The vulnerability allows code execution i...

CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

...

CVE-2024-35271

CVE-2024-35271 is a remote code execution vulnerability in the SQL Server Native Client OLE DB Provider. The CVSS v3.1 score in the initial records is 8.8 (HIGH), with network attack vector, no privileges required, but user interaction needed, and impact on confidentiality, integrity, and availab...